Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AEB56EC211511F0BF503FC6DAE4EC9C.roa
File: 3AEB56EC211511F0BF503FC6DAE4EC9C.roa (raw, json)
Hash identifier: B1S8n2xDj2IaYhAWq8ePvvxWDPsvsrr7zMHMUEgMzek=
Subject key identifier: A2:B9:61:47:23:5E:F7:DB:28:A4:92:B0:06:2A:39:89:63:C6:DE:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AEB56EC211511F0BF503FC6DAE4EC9C.roa
Signing time: Thu 24 Apr 2025 14:05:52 +0000
ROA not before: Thu 24 Apr 2025 14:05:47 +0000
ROA not after: Fri 02 May 2025 14:05:47 +0000
asID: 198247
IP address blocks: 156.238.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85642 (0x14e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 14:05:47 2025 GMT
Not After : May 2 14:05:47 2025 GMT
Subject: CN=680a4540-7638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:04:6d:dc:91:49:86:1e:75:a5:01:f0:07:
96:4a:d4:39:b2:84:df:b7:30:e7:39:a7:ab:94:da:
4b:bf:d8:43:f4:21:4b:ca:7e:33:53:15:55:10:94:
54:e9:81:c3:8f:f1:45:b1:e7:17:5a:7f:63:03:eb:
24:57:65:28:d6:66:be:d3:a6:b1:05:2a:93:be:d8:
c9:38:1a:49:bf:c1:f8:37:c4:91:0e:33:7c:83:d9:
cc:f6:b7:71:45:54:cf:07:7a:d0:a8:be:fb:67:17:
29:a6:55:c4:e6:9e:8a:25:10:fb:5a:e4:32:fc:04:
fe:c6:7e:d4:a8:86:f2:1d:f4:be:5b:a1:d2:b3:37:
be:f6:4d:88:b8:b6:34:34:20:90:2c:b4:f6:88:77:
de:4f:cf:b1:a2:f6:01:83:24:17:a6:45:25:58:08:
24:8c:fc:e3:82:7b:8f:9f:9d:f3:b6:1d:62:7a:f2:
22:ed:db:25:9d:33:91:c0:36:48:dc:88:de:62:63:
a5:13:42:c5:c8:4b:47:00:b4:5c:f1:70:4b:ad:8f:
d2:87:3f:13:42:15:ac:b0:c4:74:95:95:f8:0e:45:
6b:b1:7d:61:aa:94:41:8f:d9:36:f1:00:9d:ad:93:
81:46:87:68:54:b1:8b:df:51:c6:69:3f:b8:33:3c:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B9:61:47:23:5E:F7:DB:28:A4:92:B0:06:2A:39:89:63:C6:DE:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AEB56EC211511F0BF503FC6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
66:98:ac:bf:95:7c:79:17:49:ee:c3:42:67:83:ee:46:5a:32:
87:a1:5e:36:7c:34:df:71:92:67:d5:63:8b:73:ae:ee:a9:11:
3e:2b:ab:90:c1:bc:b3:31:77:04:b2:26:a1:11:2a:ff:65:ac:
84:42:45:6e:63:52:68:06:db:6f:b1:5a:0d:de:ca:16:ed:70:
d7:27:c4:e6:eb:c9:a2:02:cf:c2:e6:75:b0:99:9d:e2:13:00:
17:5f:72:4b:b2:2e:6a:08:2e:27:e3:48:9e:7b:22:c6:2c:0d:
b4:19:a2:20:97:3d:13:1d:2b:71:f9:cd:34:71:f7:14:3b:11:
45:46:d2:0d:35:3f:e3:14:a9:0f:b0:33:b1:76:67:fa:ca:a4:
86:9d:11:ba:d4:41:0e:c4:fb:f9:94:06:39:4e:c2:63:77:f4:
1f:8f:8b:52:ab:4f:70:11:c5:49:34:84:c4:ef:86:65:b4:c6:
cf:43:f4:79:de:3a:4b:84:8e:9c:03:1b:50:77:64:15:b1:86:
2f:dd:66:8e:1e:f9:ec:dc:9d:d8:e4:22:f2:2d:e2:fa:36:5f:
f1:24:0b:7d:62:d8:84:60:89:45:0b:92:55:07:dd:f6:bb:3b:
f4:a7:e4:fe:4d:a7:c0:99:02:98:f4:75:fd:ba:7a:0d:04:25:
04:ae:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:41:29 2025 by rpki-client on console.sobornost.net